Sicherheitslücken (CVE)

Sicherheitslücken (CVE) VulDB Updates 2 Quellen

CVE-2026-114127 | Withastro Astro up to 7.3.2 View Transition CSS Generator injection (EUVD-2026-107409)

A vulnerability was found in Withastro Astro up to 7.3.2. It has been classified as critical.

Sicherheitslücken (CVE) VulDB Updates 4 Quellen

CVE-2026-115502 | KNIME Business Hub up to 1.18.x improper authorization (EUVD-2026-108229)

A vulnerability classified as problematic has been found in KNIME Business Hub up to 1.18.x. The impacted element is an unknown function.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-114126 | storybookjs Storybook up to 8.6.18/9.1.20/10.6.1/11.0.0-alpha.5 Development Server code injection (EUVD-2026-107408)

A vulnerability categorized as critical has been discovered in storybookjs Storybook up to 8.6.18/9.1.20/10.6.1/11.0.0-alpha.5.

Sicherheitslücken (CVE) VulDB Updates 3 Quellen

CVE-2026-97631 | TianoCore EDK2 up to edk2-stable202608 buffer overflow (EUVD-2026-108230)

A vulnerability described as very critical has been identified in TianoCore EDK2 up to edk2-stable202608.

Sicherheitslücken (CVE) VulDB Updates 4 Quellen

CVE-2026-114144 | BinaryMuse toml-node up to 5.0.0 TOML Parser lib/parser.js toml.parse resource consumption (EUVD-2026-107556)

A vulnerability marked as problematic has been reported in BinaryMuse toml-node up to 5.0.0. Affected is the function toml.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-114606 | JGraph drawio-desktop up to 31.4.3 IPC information disclosure (EUVD-2026-108231)

A vulnerability classified as problematic was found in JGraph drawio-desktop up to 31.4.3.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-107832 | Fastify up to 5.12.5 Header Validation input validation (EUVD-2026-98697)

A vulnerability was found in Fastify up to 5.12.5. It has been rated as problematic.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-114145 | gitpython-developers GitPython up to 3.2.0 Submodule base.py create_submodule path traversal (EUVD-2026-107557)

A vulnerability classified as critical was found in gitpython-developers GitPython up to 3.2.0.

Sicherheitslücken (CVE) BleepingComputer

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem…

Sicherheitslücken (CVE) Check Point Blog

PHP2Shell Update: One in ten organizations impacted as Europe bears the brunt

Two critical vulnerabilities in PHP, the programming language behind a large share of the world’s websites, online stores and internet services, are…

Sicherheitslücken (CVE) OffSec

PHP2Shell – Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619)

Two major CVEs have been discovered in PHP core, both rated critical, leading to server crashes and potential remote code execution on affected web…

Sicherheitslücken (CVE) AI (artificial intelligence) 2 Quellen

The race to fix huge PHP code flaw at the heart of the internet - The Latest

Websites around the world have been taken offline as governments and businesses scramble to fix a flaw in the computer language PHP.

Sicherheitslücken (CVE) The Hacker News

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.

Sicherheitslücken (CVE) Google Alert

PHP-Sicherheitslücke: Viele Webseiten weiterhin offline - it-daily.net

Sicherheitsexperten haben die Schwachstelle als hochkritisch eingestuft.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-114501 | python-pillow Pillow up to 12.x Arrow Export uninitialized pointer (Nessus ID 370272)

A vulnerability has been found in python-pillow Pillow up to 12.x and classified as problematic.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-111816 | Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0 improper synchronization (Nessus ID 370271)

A vulnerability labeled as critical has been found in Apache Traffic Server up to 8.1.11/9.2.15/10.1.4/10.2.0.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-96637 | Pillow up to 12.x Spider Image Plugin SpiderImagePlugin.py SpiderImageFile.seek allocation of resources (Nessus ID 370273)

A vulnerability labeled as problematic has been found in Pillow up to 12.x. Affected by this issue is the function SpiderImageFile.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-96638 | Pillow up to 12.x RLE Decoder BmpImagePlugin.py BmpRleDecoder.decode denial of service (Nessus ID 370274)

A vulnerability described as problematic has been identified in Pillow up to 12.x.

Sicherheitslücken (CVE) Data and computer security

What is PHP and how serious is the computer language flaw causing website shutdowns?

An estimated 70% of websites use the open-source language. What is the identified vulnerability in it?

Sicherheitslücken (CVE) VulDB Updates 3 Quellen

CVE-2026-69902 | Microsoft Windows up to Server 2025 NTFS null pointer dereference (EUVD-2026-100116)

A vulnerability described as critical has been identified in Microsoft Windows. This affects an unknown function of the component NTFS.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-51954 | Webasyst Framework up to 4.0.3 OAuth redirect_uri (EUVD-2026-108222)

A vulnerability was found in Webasyst Framework up to 4.0.3. It has been classified as problematic.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-23706 | Fortinet FortiAnalyzer/FortiAnalyzer Cloud/FortiManager sql injection (EUVD-2026-98971)

A vulnerability has been found in Fortinet FortiAnalyzer, FortiAnalyzer Cloud and FortiManager and classified as critical.

Google Alert – it security: IT SECURITY VULNERABILITY: Cyber alert! Numerous websites offline – IT expert warns!

Sicherheitslücken (CVE) Blog

PHP2Shell: Early Attack Activity Through Imperva’s Lens

Following the public disclosure of PHP2Shell (CVE-2026-109618 and CVE-2026-109619), Imperva Threat Research observed a sharp increase in scanning and…